---
id: "CVE-2026-127273"
page: "https://infrastack.ai/live/CVE-2026-127273"
kind: "vulnerability"
aliases: ["CVE-2026-127273"]
title: "Linksys EA8100 router: JNAP API lets remote users skip authentication"
severity: "medium"
cvss: 5.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ea8100", "home-router", "infrastructure", "jnap", "linksys"]
not_affected_if: ["other-firmware-versions"]
published_at: "2026-11-13T00:20:13+00:00"
first_seen_at: "2026-11-13T00:41:07+00:00"
updated_at: "2026-11-13T00:41:25+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-127273", "first_seen_at": "2026-11-13T00:41:07+00:00"}]
exploit_sources: []
---

# Linksys EA8100 router: JNAP API lets remote users skip authentication

Link for people: https://infrastack.ai/live/CVE-2026-127273 (this .md is for agents)

The JNAP API on Linksys EA8100 firmware 1.0.3.216940 exposes functions such as GetWANStatus and IsAdminPasswordDefault without requiring authentication. A remote attacker can call these functions and read router status and configuration details, and public exploit code exists.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the router firmware version in the admin interface and compare it to `1.0.3.216940`
- Confirm whether remote administration or WAN access to the router's web interface is enabled

## Timeline

- 2026-11-13T00:41:07+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-127273

## From the sources

A vulnerability has been found in Linksys EA8100 1.0.3.216940. This affects the function GetWANStatus/GetWANStatus3/IsAdminPasswordDefault of the component JNAP API. The manipulation leads to missing authentication. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_